Skip to content

Security: Header Injection Vulnerability #4

@joexbayer

Description

@joexbayer

The current implementation does not sanitize headers or values. Attackers could exploit this to inject malicious headers (e.g., via newline characters).

  1. Add sanitization to prevent injection attacks.
  2. Reject headers with invalid characters or formats.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions